$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa File: 3a019076-b464-3583-90a4-8ee571e8d49f.roa (raw, json) Hash identifier: g6Gx+1ksecGX3ReX4PKaN9Vo9BXhs8uIBA3KSBg3qYU= Subject key identifier: B7:9C:4D:3C:43:18:0E:6F:9E:A1:B8:C2:AC:39:66:32:D6:F1:3D:42 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584FBAA12173D5E3C7E5FBA0EB00 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 393474 IP address blocks: 64.90.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:21:73:d5:e3:c7:e5:fb:a0:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=faf195ec-503f-4486-a9a6-dae12a664c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:15:d1:e4:37:f3:79:ed:38:b4:ba:d1:94: f0:5f:98:58:27:f8:6d:64:62:7f:3a:c7:03:8e:0b: 93:c1:2f:ad:d6:fc:51:52:d3:81:ff:4c:4f:88:40: 41:83:d9:86:94:65:00:4a:b8:84:24:43:6e:14:ef: de:56:1d:94:43:ff:18:68:42:49:ec:27:af:c6:71: f8:e2:01:4e:90:8a:16:b3:51:6e:5a:c5:40:78:79: e4:de:09:5b:71:69:09:f0:8f:83:57:fa:ca:cd:7e: f3:ba:91:9c:a9:d9:8a:91:d8:ea:a2:5f:26:f2:2d: a9:78:ff:86:72:cd:bc:35:8d:05:1f:b3:f1:c4:77: 6d:8c:be:1d:59:88:f9:21:e0:22:df:36:c5:65:c9: c4:75:46:e9:dd:55:69:ef:37:a4:e2:6f:2d:dc:25: af:1c:de:19:12:fa:8e:51:ae:e5:f0:5c:51:7c:b1: c8:73:0f:b4:6d:40:25:67:c0:28:04:3c:10:9f:d7: da:a5:fb:3b:6c:f6:ae:7f:c7:5c:a3:3d:b2:d5:9b: 28:5d:84:9f:16:70:13:75:e2:63:4c:e2:e6:6c:de: 62:9e:39:77:f2:5e:f0:f2:00:12:01:c4:27:2b:98: 49:d4:7c:63:da:b9:98:3c:fe:ef:dd:81:c1:fe:3e: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:4D:3C:43:18:0E:6F:9E:A1:B8:C2:AC:39:66:32:D6:F1:3D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ca:e2:cb:fc:ca:fc:5c:29:a6:78:b9:57:1e:ed:8e:20:09: ae:84:48:db:82:32:de:f8:1d:b3:94:e5:99:ae:4d:3d:60:55: 24:bd:fb:cc:ae:0a:7e:ac:ca:77:85:09:de:d7:c5:30:7c:26: ad:84:b0:e8:82:56:a3:71:66:1b:ec:2d:e4:e2:95:73:4f:c3: 6b:a7:69:39:7f:e3:16:f6:7b:ad:e8:f2:ad:52:fa:a7:6a:f4: d8:b0:33:b7:6f:bf:62:4c:09:ca:49:e1:9e:46:1d:0b:55:ba: 6a:2a:8f:3e:2d:03:c8:99:39:0c:44:08:ca:d0:45:8e:26:23: d5:25:64:bd:a4:2c:0f:f6:62:50:e6:4b:7e:96:ca:bf:ca:05: 17:62:f2:26:d1:fd:01:00:f1:38:4b:14:9a:39:2e:f9:8f:2c: 5e:df:19:53:7c:42:09:53:b5:93:f2:3c:a4:d5:84:80:c3:88: cc:42:eb:fe:39:2f:a1:c0:25:59:c2:0f:24:94:26:08:e3:15: 06:eb:7c:0a:1d:25:d7:15:5d:43:d3:6e:89:c1:d4:a0:86:8b: c0:89:6e:f0:11:07:4b:6d:c8:2b:80:a4:da:2d:46:1d:a9:66: 01:88:44:8e:e6:4d:90:e4:98:b0:7c:79:cc:7b:77:14:09:9a: d3:db:94:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oSFz1ePH5fug6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZmFmMTk1ZWMtNTAzZi00NDg2LWE5YTYtZGFlMTJhNjY0YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9IV0eQ383ntOLS60ZTwX5hYJ/htZGJ/OscD jguTwS+t1vxRUtOB/0xPiEBBg9mGlGUASriEJENuFO/eVh2UQ/8YaEJJ7CevxnH4 4gFOkIoWs1FuWsVAeHnk3glbcWkJ8I+DV/rKzX7zupGcqdmKkdjqol8m8i2peP+G cs28NY0FH7PxxHdtjL4dWYj5IeAi3zbFZcnEdUbp3VVp7zek4m8t3CWvHN4ZEvqO Ua7l8FxRfLHIcw+0bUAlZ8AoBDwQn9fapfs7bPauf8dcoz2y1ZsoXYSfFnATdeJj TOLmbN5injl38l7w8gASAcQnK5hJ1Hxj2rmYPP7v3YHB/j6wiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLecTTxDGA5vnqG4wqw5ZjLW8T1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvM2EwMTkwNzYtYjQ2NC0z NTgzLTkwYTQtOGVlNTcxZThkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrK4sv8yvxcKaZ4uVce7Y4gCa6ESNuCMt74HbOU5ZmuTT1gVSS9+8yu Cn6syneFCd7XxTB8Jq2EsOiCVqNxZhvsLeTilXNPw2unaTl/4xb2e63o8q1S+qdq 9NiwM7dvv2JMCcpJ4Z5GHQtVumoqjz4tA8iZOQxECMrQRY4mI9UlZL2kLA/2YlDm S36Wyr/KBRdi8ibR/QEA8ThLFJo5LvmPLF7fGVN8QglTtZPyPKTVhIDDiMxC6/45 L6HAJVnCDySUJgjjFQbrfAodJdcVXUPTbonB1KCGi8CJbvARB0ttyCuApNotRh2p ZgGIRI7mTZDkmLB8ecx7dxQJmtPblEk= -----END CERTIFICATE-----Generated at Thu Nov 5 09:31:09 2026 by rpki-client